Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145462.roa
File: AS145462.roa (raw, json)
Hash identifier: pHwy482tRtcpDSregOUsTtFzHaoPCMtGbBcPCk/nLiI=
Subject key identifier: 07:A4:94:B8:8E:51:7C:EA:1C:2D:B9:D5:BD:20:77:10:AE:69:CF:99
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1A97C709BC10AEA95B1BA0C0637FEEBC4ACDC5E0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145462.roa
Signing time: Mon 25 May 2026 01:38:27 +0000
ROA not before: Mon 25 May 2026 01:33:27 +0000
ROA not after: Mon 24 May 2027 01:38:27 +0000
asID: 145462
IP address blocks: 240a:aafc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:97:c7:09:bc:10:ae:a9:5b:1b:a0:c0:63:7f:ee:bc:4a:cd:c5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:27 2026 GMT
Not After : May 24 01:38:27 2027 GMT
Subject: CN=07A494B88E517CEA1C2DB9D5BD207710AE69CF99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:fe:95:f8:f4:47:90:cc:32:c8:49:75:26:
08:54:a4:20:8b:e5:c7:c1:6e:73:93:09:83:d2:38:
c7:c9:9b:48:c8:d5:82:76:fa:5e:e4:1c:88:64:7c:
c6:09:61:2a:f6:9e:3f:0b:c8:af:06:fb:a6:95:86:
c3:d3:78:b1:45:04:7d:b7:1f:65:65:d8:81:21:83:
53:6e:f1:44:fd:31:01:2b:d5:9c:6d:af:d3:92:17:
60:20:4f:7f:5d:8a:0c:e0:ce:a8:6f:25:33:a8:4b:
df:a5:b2:8a:4d:20:58:88:23:5e:b1:69:19:68:5a:
40:65:ba:cd:43:65:fa:96:e4:29:e5:c2:93:0c:ba:
31:3c:ce:27:76:8d:b1:68:50:48:42:86:0e:67:c2:
95:fd:a1:7d:65:11:61:b0:e1:68:f2:c0:15:80:13:
61:a1:59:73:8a:33:d7:6f:14:d9:ae:f7:30:6e:86:
3e:7d:7f:9f:2e:6d:b3:32:fd:a8:df:d0:2b:b4:0b:
e0:2b:36:58:dc:c7:71:34:ee:46:f0:98:a4:f5:90:
a1:c5:b3:c4:b2:bf:97:2a:30:ff:90:db:46:4c:f4:
e9:21:98:70:37:11:14:e2:d9:08:4f:ce:78:58:5a:
75:ed:53:01:fb:6b:41:65:f2:18:00:7a:21:ca:6f:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A4:94:B8:8E:51:7C:EA:1C:2D:B9:D5:BD:20:77:10:AE:69:CF:99
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145462.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aafc::/32
Signature Algorithm: sha256WithRSAEncryption
59:e2:82:a0:71:a7:00:54:2e:00:46:0a:13:b2:2e:63:29:d8:
65:ef:a9:62:7a:13:77:fc:8e:c0:71:5f:b6:5b:aa:69:f1:c6:
2a:2a:e4:05:06:5a:6e:36:d2:a1:a1:39:61:f3:54:bd:a5:67:
0a:92:e1:40:09:89:ec:13:61:21:87:56:53:7d:36:2d:c6:ee:
1c:f4:f3:db:e8:ed:a5:03:92:e3:9d:66:c7:e2:c1:77:d2:99:
ef:4a:4e:fe:b0:6e:53:3b:73:56:82:6e:95:d8:8a:a7:af:27:
25:fa:2c:3a:f0:52:f0:56:32:14:de:aa:21:08:f4:0f:34:89:
64:4c:c6:73:8b:62:fc:98:44:7b:f4:02:be:71:a9:16:37:00:
6f:4b:1b:20:50:4c:62:ec:32:b7:18:0b:6e:3b:d1:c1:97:f3:
f6:b7:33:db:c2:d2:54:70:8e:85:39:21:e3:63:85:67:07:15:
79:26:73:af:e5:f7:e5:57:ca:b8:48:d8:3e:4a:11:c7:58:ec:
7c:19:e1:6e:ae:3d:ba:00:69:8c:92:6e:ba:4d:bf:63:ed:43:
73:54:a7:0a:cf:b2:1f:a5:fe:57:ab:08:59:f3:14:e9:3e:fe:
cc:4f:5a:fe:8e:44:0e:25:0a:38:14:bd:96:a7:9b:71:d9:75:
44:cd:85:79
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGpfHCbwQrqlbG6DAY3/uvErNxeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMjdaFw0yNzA1MjQwMTM4MjdaMDMxMTAvBgNV
BAMTKDA3QTQ5NEI4OEU1MTdDRUExQzJEQjlENUJEMjA3NzEwQUU2OUNGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6f6V+PRHkMwyyEl1JghUpCCL
5cfBbnOTCYPSOMfJm0jI1YJ2+l7kHIhkfMYJYSr2nj8LyK8G+6aVhsPTeLFFBH23
H2Vl2IEhg1Nu8UT9MQEr1Zxtr9OSF2AgT39digzgzqhvJTOoS9+lsopNIFiII16x
aRloWkBlus1DZfqW5CnlwpMMujE8zid2jbFoUEhChg5nwpX9oX1lEWGw4WjywBWA
E2GhWXOKM9dvFNmu9zBuhj59f58ubbMy/ajf0Cu0C+ArNljcx3E07kbwmKT1kKHF
s8Syv5cqMP+Q20ZM9OkhmHA3ERTi2QhPznhYWnXtUwH7a0Fl8hgAeiHKb+mjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUB6SUuI5RfOocLbnVvSB3EK5pz5kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq/DANBgkqhkiG9w0BAQsFAAOCAQEAWeKC
oHGnAFQuAEYKE7IuYynYZe+pYnoTd/yOwHFftluqafHGKirkBQZabjbSoaE5YfNU
vaVnCpLhQAmJ7BNhIYdWU302LcbuHPTz2+jtpQOS451mx+LBd9KZ70pO/rBuUztz
VoJuldiKp68nJfosOvBS8FYyFN6qIQj0DzSJZEzGc4ti/JhEe/QCvnGpFjcAb0sb
IFBMYuwytxgLbjvRwZfz9rcz28LSVHCOhTkh42OFZwcVeSZzr+X35VfKuEjYPkoR
x1jsfBnhbq49ugBpjJJuuk2/Y+1Dc1SnCs+yH6X+V6sIWfMU6T7+zE9a/o5EDiUK
OBS9lqebcdl1RM2FeQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client